Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json)
Hash identifier: 4WmpvxoaLFIBleX3+bxKa8kTVxhHC9L6IO1wbizwqqY=
Subject key identifier: 9D:AA:55:8D:1B:BF:8D:CF:B8:94:35:49:9C:5D:D2:35:F7:0C:F7:AA
Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Certificate serial: 0198530EBC4089306D498A74FEBE7B4436DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
Manifest number: 1258
Signing time: Mon 28 Jul 2025 22:02:11 +0000
Manifest this update: Mon 28 Jul 2025 22:02:11 +0000
Manifest next update: Tue 29 Jul 2025 22:02:11 +0000
Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: mwajqA4UdrWdJEoax6EsWjxfNDbzpDcFvYel3N4If9A=)
2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:bc:40:89:30:6d:49:8a:74:fe:be:7b:44:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2
Validity
Not Before: Jul 28 22:02:11 2025 GMT
Not After : Jul 29 22:02:11 2025 GMT
Subject: CN=9daa558d1bbf8dcfb89435499c5dd235f70cf7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:7c:4e:f2:46:59:21:87:71:22:0a:af:d0:
63:9a:de:07:02:c7:7f:75:86:c1:fe:b0:04:b1:74:
3b:f6:68:94:2b:ae:44:3a:b0:5e:6d:9a:25:a2:48:
ea:61:93:0e:63:b0:35:93:2e:b0:e0:76:89:bf:e9:
ec:a8:4d:50:93:b3:7c:4a:9b:f0:80:a1:a2:7f:4f:
a9:c6:ec:4c:9b:d1:b4:e2:f9:ec:19:58:82:49:99:
57:ef:1f:5c:07:ef:30:4b:7e:ec:6b:82:5c:a1:90:
a0:90:d3:6e:75:e6:be:ae:9f:20:02:61:be:bd:ad:
71:f4:09:25:87:68:6b:6d:03:c3:8f:0c:8e:63:c1:
5e:ad:9b:25:43:db:57:4c:24:2e:2c:10:3c:16:f0:
e1:6b:3a:fa:6b:ae:85:4c:1a:33:ae:ce:f2:fe:32:
b1:96:5c:a9:24:9b:db:29:2c:23:b8:97:26:7a:2b:
74:34:2a:95:57:b2:da:a9:61:38:64:c2:67:1b:b8:
12:c4:66:10:f5:bc:7f:8d:1d:a2:87:cd:08:d8:78:
bf:a7:99:1b:53:d0:00:39:fd:7f:ed:c4:fd:11:eb:
1e:46:cf:29:47:7d:de:7c:74:80:11:fd:47:fa:74:
50:b2:38:44:8f:04:5c:78:48:e2:a8:fa:05:24:ba:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:55:8D:1B:BF:8D:CF:B8:94:35:49:9C:5D:D2:35:F7:0C:F7:AA
X509v3 Authority Key Identifier:
keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:f5:ec:cf:38:42:11:f0:8c:18:db:76:e5:bf:87:5c:2d:
40:93:ed:3f:eb:d7:69:8f:0d:a0:0c:1b:79:25:91:02:e1:e6:
8a:26:75:52:94:98:61:76:b9:07:07:5b:d0:b7:08:85:38:b9:
08:34:16:58:e8:5c:ce:64:ed:9e:1a:bd:4a:67:96:a6:e7:24:
4d:23:2c:fb:56:21:f2:cd:a3:82:30:8d:3e:97:52:6c:c7:46:
e0:ac:a2:b2:14:4a:90:d2:c7:15:d3:51:21:f7:97:a1:b4:00:
68:59:b3:2e:b1:15:5d:dd:3b:2b:64:9a:7d:5c:34:bf:47:12:
0b:21:38:a2:b2:48:9d:f6:5d:17:eb:5d:36:95:65:53:1f:5f:
bc:b4:f1:19:25:ac:cc:bf:16:51:4f:21:f0:dd:bf:a7:c5:fb:
ca:18:7d:53:72:f4:72:07:c6:9f:86:63:39:5a:87:8f:62:0d:
41:ff:ad:03:43:cf:5c:64:bb:d0:81:0f:fc:de:3e:97:78:50:
85:af:f9:e4:61:63:c5:bf:3a:60:b4:c1:b6:4b:da:5e:3e:3d:
58:16:74:f6:7d:f2:41:2c:b0:83:df:8a:58:18:35:a6:9b:00:
fc:ba:8b:5c:09:52:32:a0:a2:e9:57:07:45:28:aa:4d:84:f5:
8a:b0:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:27 2025 by rpki-client